General

  • Target

    a9f6854cdfbdc96220c392c7f726fdcf8e7a9a5d4958ab03f0bff03cf6c1d6bb

  • Size

    309KB

  • Sample

    230720-sw58yshh5s

  • MD5

    4adbddbc6b4260342235ed59b62912a9

  • SHA1

    a9011c16bf0bf6a846435594ad6f4dbd2127dedb

  • SHA256

    a9f6854cdfbdc96220c392c7f726fdcf8e7a9a5d4958ab03f0bff03cf6c1d6bb

  • SHA512

    da1ee8c17fe310ee037751084f26cc52bf14ad07838d5b078b3034d974de0213f060472b59ee1442f117b8b845e6c6c68a9487737e73060c0a082b838ee04341

  • SSDEEP

    3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Targets

    • Target

      a9f6854cdfbdc96220c392c7f726fdcf8e7a9a5d4958ab03f0bff03cf6c1d6bb

    • Size

      309KB

    • MD5

      4adbddbc6b4260342235ed59b62912a9

    • SHA1

      a9011c16bf0bf6a846435594ad6f4dbd2127dedb

    • SHA256

      a9f6854cdfbdc96220c392c7f726fdcf8e7a9a5d4958ab03f0bff03cf6c1d6bb

    • SHA512

      da1ee8c17fe310ee037751084f26cc52bf14ad07838d5b078b3034d974de0213f060472b59ee1442f117b8b845e6c6c68a9487737e73060c0a082b838ee04341

    • SSDEEP

      3072:5JGXcVezz7EjiRKpwelYpKLUrlfKsLX049hWa/dUBilHMOnwXQPq8Gxzn729897X:mWhjiRiwzcErsBilHn27RV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks